Blockchain Authorization Credentials for Dynamic Personal Data Consent
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems fail to provide a secure and efficient way to provide a secure and efficient way for individuals to control the privacy and usage of their personal data, especially in blockchain-based data-sharing platforms, as they lack the ability to autonomously decide who can access their data and under what conditions.
Innovation Solution
A personal data use authorization system utilizing dynamic consent forms, credential management, de-identification, and blockchain technology to enable individuals to authorize data usage, ensuring privacy and control over their personal data through hash values and non-fungible tokens.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If blockchain technology is used to store personal data, then data security and sharing capability are improved, but individual control over data privacy and usage conditions is lost
Solution Approach 1:
The patent segments personal data into two parts: (1) de-identified data stored on the blockchain for security and sharing, and (2) identification information stored locally with the user for privacy control. This segmentation allows the system to achieve both data security through blockchain and individual control through local storage of identification information.
Solution Approach 2:
The patent introduces a de-identification subsystem as an intermediary between personal data and the blockchain. This intermediary layer removes direct links between identifiable information and data while preserving data utility, enabling users to maintain control over their data while still benefiting from blockchain's security and sharing capabilities.
2Productivity
If personal data is made available for research and analysis, then research outcomes and industry applications are improved, but personal privacy protection is compromised
Solution Approach 1:
The patent extracts only the necessary de-identified data from the full personal data set and stores it on the blockchain. By taking out only the essential data elements while removing identification information, the system enables research and analysis productivity while eliminating direct privacy risks associated with storing complete personal data on distributed ledgers.
Solution Approach 2:
The patent applies different quality characteristics to different data: de-identified data is stored on the blockchain with high accessibility for research, while identification data is stored locally with high security and privacy protection. This local quality differentiation allows the system to optimize for both research efficiency and privacy protection simultaneously.
3Object-affected harmful factors
If dynamic authorization control is implemented, then data privacy protection is improved, but system complexity increases
Solution Approach 1:
The patent implements self-service authorization where users directly control their own data through a user-friendly interface. Users can dynamically authorize or revoke access to their de-identified data without requiring complex system administration or technical knowledge, thereby improving privacy protection while keeping the system simple for end users.
Solution Approach 2:
The patent creates a universal authorization mechanism that handles multiple data access scenarios through a single de-identification subsystem. This multi-functional approach consolidates what would otherwise be multiple separate control mechanisms into one unified system, reducing overall system complexity while maintaining comprehensive privacy protection.
Data Source
AI summary
The present disclosure provides a method and a system for dynamically authorizing personal data based on a blockchain. The method includes: receiving a use requirement, submitted by a personal data requester, for using personal data of a personal data owner; notifying the personal data owner of the use requirement; receiving a grant made by the personal data owner; generating an authorization credential based on a blockchain non-fungible token and linking the authorization credential to a blockchain wallet of the personal data requester; receiving a request, submitted by the personal data requester, for accessing the personal data of the personal data owner; verifying that the blockchain wallet of the personal data requester is linked with the authorization credential created by the personal data owner; and providing the personal data stored in the blockchain to be accessed by the personal data requester after the authorization credential is successfully verified.